Overview
Within the Cybersecurity Verifications & Certifications structure, you will join the Cybersecurity Requirement Verifications & Controls team and will be responsible for Security Verification activities in project contexts, also coordinating external collaborators. You will analyze security, operational continuity, and anti-fraud requirements, verify what project teams have implemented in testing and validation environments, identify any gaps, monitor mitigation actions, and contribute to reporting to key stakeholders.
What will your activities be
- Contribute to the classification of the Bank's project initiatives aimed at identifying projects most exposed to cybersecurity, operational continuity, and anti-fraud risks
- Analyze specification documentation of project initiatives within the analysis scope, verifying for the various cybersecurity disciplines the adequate treatment of related requirements
- Verify, including on a sample basis, the actual compliance of what has been implemented by project teams in test and/or validation environments with respect to the project's security, operational continuity, and anti-fraud requirements
- Identify any gaps in the project from the perspective of cybersecurity requirement coverage and proceed to classify individual vulnerabilities by weighing exploitation probability and related impact
- Ensure continuous monitoring of identified gaps and related mitigation actions
- Prepare periodic reporting on the status of project verifications for use by ICT and Cybersecurity Area Managers, Corporate Control Functions (Risk & Compliance), and all other relevant Stakeholders according to their respective areas of responsibility
Who we are looking for
If you have the following characteristics, we are waiting for you:
- 5-10 years of experience in Cybersecurity and/or Business Continuity
- Knowledge of reference frameworks (e.g. NIST Cybersecurity, ISO 27001, ISO 22301, Swift CSP, etc.) and cybersecurity and business continuity regulations (e.g. Law 133 on the national cybersecurity perimeter, Circular 285, NIS Directive, PSD2, DORA, etc.), with adoption experience
- Excellent knowledge of the English language
- Knowledge and mastery of Office Automation packages (Word, PowerPoint and Excel) and good knowledge of Workflow Management / CRM platforms (e.g. Service Now)
- Knowledge of generative artificial intelligence solutions capable of improving work efficiency and optimizing results
The following certifications are considered preferential:
- CISM
- CISSP
- ISO 27001
- ISO 22301
- CSX Fundamentals
- NIST
- COBIT
What we offer you
- Gross annual salary starting from €50,000
- The Group provides a variable component of remuneration as regulated by the Remuneration Policies available on the Group website
- Complementary elements governed by the National Collective Labor Agreement for Credit and second-level company agreements
- Professional development initiatives to support the growth of our people
- Extensive training offering through the Corporate Academy dedicated to continuous development of professional, managerial, and transversal skills at all levels
- Possibility to adopt flexible work and a 4x9 short week
- Modern and integrated corporate welfare system (link)
- Healthcare coverage and supplementary pension from the date of hire
- Advantages on the Group's banking products and services
Who we are
We are a leader in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and tangible impact on society.
People are at the center, we take care of them by committing to create an inclusive culture within the Group in which everyone feels like a protagonist and valued.
The Chief Security Officer Governance Area oversees in an integrated manner the physical security, cybersecurity, and operational continuity of the Group, leveraging specialized expertise and advanced technological solutions, with the objective of ensuring high international security standards.
The Area includes the structures of Security Staff, Group Security Planning & Models Monitoring, Corporate and Physical Security and Cybersecurity, Antifraud & Business Continuity Management, ensuring a coordinated and cross-functional approach to protecting the Group.
Join our international reality. The future doesn't wait, you choose it!
#sharingfuture
We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability, or any other protected category in compliance with D.lgs. 198/2006, 215/03, and 216/03.
For the evaluation of applications, data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to review the dedicated Privacy Notice.